Privacy Policy — 10wen Casino & Sportsbook

10wen is an online casino and sportsbook platform operating at https://10wen.pro, offering cricket betting, live casino games, slots, virtual sports, and related entertainment services to registered players. References to "10wen," "we," "us," or "our" throughout this Privacy Policy refer to the operating entity behind the 10wen platform and its licensed services.

10wen acts as the data controller in respect of the personal information you provide when registering, depositing, playing, or otherwise interacting with the 10wen platform. As data controller, we determine the purposes and means by which your personal data is processed, and we are responsible for ensuring that processing is conducted lawfully and in accordance with this Privacy Policy.

This Privacy Policy applies to all users of the 10wen platform, including registered players based in Karachi, Lahore, Islamabad, Faisalabad, and all other locations where the platform is accessible. It covers all data collected through the 10wen website, any mobile-optimised interface, and all account-related communications.

10wen collects personal data from you in connection with your use of the platform. The categories of personal data we may collect include the following:

Identity and Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for age verification — you must be 21 or older to use 10wen).
• Gender (optional, for account personalisation purposes).
• Nationality and country of residence.
• Copy of your CNIC (Computerised National Identity Card), passport, or other accepted government-issued photo ID, collected during the KYC verification process.

Contact Data

• Email address registered to your 10wen account.
• Mobile phone number (used for account authentication and security alerts).
• Residential or mailing address (required for certain withdrawal methods and KYC compliance).

Financial and Payment Data

• JazzCash or EasyPaisa mobile wallet identifiers associated with deposits or withdrawals.
• Bank account details (account title and IBAN) for HBL, UBL, Meezan Bank, Allied Bank, or other bank transfer transactions.
• USDT TRC20 wallet addresses and Bitcoin wallet addresses used for crypto deposits or withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references.

Account and Gaming Activity Data

• Username, account ID, login history, and session timestamps.
• Betting history, game history, wagering amounts, and outcomes across all 10wen products including cricket betting, slots, live casino, and virtual sports.
• Bonus participation history, promotional offers claimed, and wagering requirement progress.
• Responsible gaming settings including deposit limits, session limits, and any self-exclusion records.

Technical and Device Data

• IP address and geolocation data derived from your IP at the time of login and activity.
• Device type, operating system, browser type and version.
• Cookie identifiers and session tokens generated during platform use.
• Referral source data indicating how you arrived at the 10wen platform.

Communications Data

• Records of live chat conversations, support emails, and any correspondence with the 10wen customer support team.
• Records of your communication preferences, including marketing opt-in or opt-out status.

10wen collects personal data through the following channels and methods:

• Directly from you: When you register a 10wen account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings, you provide personal data directly to us.
• Automatically during platform use: Our platform automatically collects technical data such as IP address, device identifiers, session tokens, and browsing behaviour within the 10wen site each time you access and interact with the platform.
• Through cookies and tracking technologies: 10wen uses cookies, pixel tags, and similar technologies to track session activity, maintain login state, and analyse platform performance. See Section 8 for full cookie details.
• From third-party payment providers: When you transact via JazzCash, EasyPaisa, bank transfer, USDT, or Bitcoin, our payment processing partners may provide us with transaction confirmation data, including reference numbers and wallet or account identifiers.
• From identity verification services: During KYC processing, 10wen may use third-party identity verification partners who cross-reference the documents you submit against official identity databases.
• From fraud prevention services: 10wen uses fraud detection tools that may receive technical data (IP, device fingerprint) to help identify suspicious activity and protect players from unauthorised account access.

10wen uses the personal data we collect for the following specific purposes:

We do not use automated decision-making processes that produce legal or similarly significant effects on players without providing an opportunity to request human review of the decision. Where automated tools are used for fraud detection, a flagged account is always reviewed by a human member of the 10wen compliance team before any enforcement action is taken.

10wen processes personal data on the basis of one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing that is required to enter into and perform the contract between you and 10wen — including account creation, payment processing, game delivery, and withdrawal execution. Without this processing, 10wen cannot provide you with its services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and any data retention requirements imposed by our gaming licence conditions.
• Legitimate interests: Processing carried out in 10wen's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and anonymised analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. Where consent is the legal basis, you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

10wen does not sell your personal data. We share personal data only in the following limited and necessary circumstances:

• Payment processors: To process your JazzCash, EasyPaisa, bank transfer, USDT, or Bitcoin transactions, we share the minimum necessary payment data with our payment processing partners. These partners are contractually bound to handle your data securely and only for the purpose of completing your transaction.
• Identity verification providers: To complete KYC checks, we may share identity document data with accredited third-party identity verification services. These providers are prohibited from using your data for any purpose other than the verification service they provide to 10wen.
• Fraud prevention partners: We share technical data (IP addresses, device fingerprints, behavioural patterns) with fraud detection service providers to identify and prevent fraudulent activity and protect the integrity of the 10wen platform.
• Game content providers: To deliver casino games, live dealer tables, and virtual sports content, certain technical session data may be shared with our licensed game content suppliers. Game providers receive only the data necessary to render and log game sessions.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, 10wen will disclose personal data to competent authorities. We will notify you of such disclosure where we are legally permitted to do so.
• Professional advisors: In connection with legal, audit, or compliance activities, 10wen may share relevant data with its legal counsel, accountants, or compliance consultants, who are bound by confidentiality obligations.

All third parties with whom 10wen shares personal data are required to maintain appropriate data security standards and are prohibited from using your data for purposes beyond those for which it was shared.

10wen retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active 10wen account relationship, plus a minimum period of five (5) years following account closure to satisfy AML and gaming licence record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory guidance.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with anti-money laundering record-keeping obligations.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to a dispute or legal matter, in which case it is retained for the duration of that matter plus two years.
• Marketing consent records: Retained for the duration of your opt-in consent, plus two (2) years following your withdrawal of consent, to demonstrate compliance with consent-based processing rules.
• Self-exclusion records: Retained indefinitely to prevent re-registration during or after a permanent self-exclusion period.

When personal data is no longer required for any retention purpose, it is securely deleted or anonymised in accordance with 10wen's internal data lifecycle management procedures.

10wen uses cookies and similar technologies on the platform. Cookies are small text files placed on your device that help the platform function correctly and allow us to understand how the platform is used. The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the 10wen platform to function. They maintain your login session, enable secure transactions, and allow the platform to remember your preferences during a session. These cookies cannot be disabled without preventing core platform functionality.
• Performance and analytics cookies: We use analytics tools to understand how players interact with the 10wen platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is collected in anonymised or aggregated form and is used solely to improve the platform experience.
• Functional cookies: These cookies remember your language preference, display settings, and other personalisation choices across sessions, so you do not have to reconfigure your preferences every time you log in.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and credential stuffing. These cookies help protect your account from unauthorised access.

10wen does not use third-party advertising cookies that track your behaviour across external websites unrelated to the 10wen platform. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the platform.

10wen takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 10wen platform is encrypted using TLS (Transport Layer Security) protocols. You can verify this by the padlock icon in your browser's address bar when visiting 10wen.pro.
• Encryption at rest: Sensitive personal data stored on 10wen's servers — including payment data, identity documents, and account credentials — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within 10wen's systems is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality obligations and receive data handling training.
• Two-factor authentication (2FA): 10wen strongly recommends enabling 2FA on your account for an additional layer of protection. 2FA is available from your account settings dashboard and significantly reduces the risk of unauthorised account access.
• Regular security assessments: 10wen conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential data security risks.

Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident that poses a risk to your personal data, 10wen will notify affected players and relevant authorities in accordance with applicable data breach notification requirements.

As a 10wen player, you hold the following rights in respect of your personal data. These rights can be exercised by contacting our support team via live chat or email:

• Right of access: You may request a copy of the personal data 10wen holds about you. We will provide this within 30 days of a verified request, in a commonly used electronic format.
• Right to rectification: If any personal data held by 10wen about you is inaccurate or incomplete, you have the right to request that we correct it. Account contact details can often be updated directly from your account settings dashboard.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies. Please note that certain data (particularly KYC and financial records) must be retained under legal and regulatory obligations, and cannot be deleted upon request.
• Right to restrict processing: In certain circumstances, you may ask us to restrict our processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data carried out on the basis of 10wen's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact 10wen's support team. We will verify your identity before processing any data rights request to ensure we do not disclose, amend, or delete data belonging to another person. We aim to respond to all data rights requests within 30 calendar days.

The 10wen platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and our KYC verification process is specifically designed to confirm that all registered players meet the minimum age threshold.

If 10wen becomes aware that personal data has been collected from an individual under the age of 21 — whether due to a false declaration at registration or any other reason — we will immediately close the associated account, void any transactions processed during the period of underage use, and securely delete all personal data associated with that account to the extent permitted by applicable law.

As an internationally operated platform, 10wen may process and store personal data on servers or through service providers located outside of Pakistan. When personal data is transferred to jurisdictions outside Pakistan, 10wen ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements with all third-party processors that include binding data protection obligations consistent with internationally recognised data protection standards.
• Transfer only to service providers located in jurisdictions assessed to provide an adequate level of data protection, or where specific contractual protections have been put in place.
• Limiting international data transfers to the minimum personal data necessary for the specific service being provided by the relevant third-party processor.

By registering a 10wen account, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan as described in this section, in connection with the delivery of 10wen's services.

10wen reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new service features, regulatory requirements, or legal obligations. Where changes are material — meaning they significantly affect how we use your personal data or your rights in relation to it — we will notify you by email to the address registered on your account, or by a prominent notice displayed on the 10wen platform, prior to the change taking effect.

Minor updates, including clarifications and typographical corrections, may be made without advance notice. The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed of how 10wen protects your data. Your continued use of the platform following publication of any update constitutes your acknowledgement of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or 10wen's handling of your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the 10wen platform. Our support agents operate in both English and Urdu and aim to respond to all privacy-related queries within 3–5 minutes.
• Email: [email protected] — please include "Privacy Query" in your subject line and allow up to 48 hours for a response. For formal data rights requests (access, erasure, portability), please include your account username and a clear description of your request.